Dear Pak Syafril,
berikuti ini adalah log spam email yang masuk di inbox salah satu user
kami. mohon masukan agar spam sejenis ini tidak lagi perlu masuk inbox
bagaimana caranya ya, Pak?
--
Warm Regards,
Anjas
--
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia
Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir MD 19.0.3, SG 6.0.3
Tue 2019-07-23 17:02:19.121: 05: Session 940740; child 0001
Tue 2019-07-23 17:02:19.121: 05: Accepting SMTP connection from
46.151.8.4:17833 to 10.0.0.1:25
Tue 2019-07-23 17:02:19.125: 03: --> 220 aksball.co.id ESMTP Tue, 23 Jul 2019
17:02:19 +0700
Tue 2019-07-23 17:02:19.330: 02: <-- EHLO mail.nemiya.com
Tue 2019-07-23 17:02:19.331: 03: --> 250-aksball.co.id Hello mail.nemiya.com
[46.151.8.4], pleased to meet you
Tue 2019-07-23 17:02:19.331: 03: --> 250-ETRN
Tue 2019-07-23 17:02:19.331: 03: --> 250-AUTH LOGIN PLAIN
Tue 2019-07-23 17:02:19.331: 03: --> 250-8BITMIME
Tue 2019-07-23 17:02:19.331: 03: --> 250-ENHANCEDSTATUSCODES
Tue 2019-07-23 17:02:19.331: 03: --> 250 SIZE
Tue 2019-07-23 17:02:19.537: 02: <-- MAIL FROM:<k...@nemiya.com> SIZE=31090
Tue 2019-07-23 17:02:19.538: 05: Performing PTR lookup (4.8.151.46.IN-ADDR.ARPA)
Tue 2019-07-23 17:02:19.562: 05: * D=4.8.151.46.IN-ADDR.ARPA TTL=(15)
PTR=[mail.nemiya.com]
Tue 2019-07-23 17:02:19.588: 05: * D=mail.nemiya.com TTL=(254) A=[46.151.8.4]
Tue 2019-07-23 17:02:19.588: 05: ---- End PTR results
Tue 2019-07-23 17:02:19.590: 05: Performing IP lookup (mail.nemiya.com)
Tue 2019-07-23 17:02:19.590: 05: * D=mail.nemiya.com TTL=(254) A=[46.151.8.4]
Tue 2019-07-23 17:02:19.590: 05: ---- End IP lookup results
Tue 2019-07-23 17:02:19.592: 05: Performing IP lookup (nemiya.com)
Tue 2019-07-23 17:02:19.614: 05: * D=nemiya.com TTL=(9) A=[46.151.10.50]
Tue 2019-07-23 17:02:19.637: 05: * P=010 S=000 D=nemiya.com TTL=(323)
MX=[mail.nemiya.com] {46.151.8.4}
Tue 2019-07-23 17:02:19.637: 05: ---- End IP lookup results
Tue 2019-07-23 17:02:19.638: 09: Performing SPF lookup (mail.nemiya.com /
46.151.8.4)
Tue 2019-07-23 17:02:19.660: 09: * Result: none; no SPF record in DNS
Tue 2019-07-23 17:02:19.660: 09: ---- End SPF results
Tue 2019-07-23 17:02:19.660: 09: Performing SPF lookup (nemiya.com / 46.151.8.4)
Tue 2019-07-23 17:02:19.680: 09: * Policy: v=spf1 ip4:46.151.8.4
include:_spf.yandex.net include:mail.nemiya.com include:_sfp.googl.com ~all
Tue 2019-07-23 17:02:19.680: 09: * Evaluating ip4:46.151.8.4: match
Tue 2019-07-23 17:02:19.680: 09: * Result: pass
Tue 2019-07-23 17:02:19.680: 09: ---- End SPF results
Tue 2019-07-23 17:02:19.680: 03: --> 250 2.1.0 Sender OK
Tue 2019-07-23 17:02:19.886: 02: <-- RCPT TO:<yust...@aksball.co.id>
Tue 2019-07-23 17:02:19.891: 03: --> 250 2.1.5 Recipient OK
Tue 2019-07-23 17:02:20.097: 02: <-- DATA
Tue 2019-07-23 17:02:20.099: 01: Creating temp file (SMTP):
d:\mdaemon\queues\temp\md50000301173.tmp
Tue 2019-07-23 17:02:20.099: 03: --> 354 Enter mail, end with <CRLF>.<CRLF>
Tue 2019-07-23 17:02:21.388: 01: Message size: 30445 bytes
Tue 2019-07-23 17:02:21.389: 10: Performing DKIM lookup
Tue 2019-07-23 17:02:21.389: 10: * File:
d:\mdaemon\queues\temp\md50000301173.tmp
Tue 2019-07-23 17:02:21.389: 10: * Message-ID:
<20190718194303.35971adddfae9...@nemiya.com>
Tue 2019-07-23 17:02:21.412: 10: * DKIM-Signature 1: v=1; a=rsa-sha256;
q=dns/txt; c=relaxed/relaxed; d=nemiya.com; s=mail; ; <some tags are not logged>
Tue 2019-07-23 17:02:21.412: 10: * Verification result: DKIM_SIGNATURE_BAD
Tue 2019-07-23 17:02:21.412: 10: * Result: neutral
Tue 2019-07-23 17:02:21.412: 10: ---- End DKIM results
Tue 2019-07-23 17:02:21.416: 19: Performing DMARC processing
Tue 2019-07-23 17:02:21.416: 19: * File:
d:\mdaemon\queues\temp\md50000301173.tmp
Tue 2019-07-23 17:02:21.416: 19: * Message-ID:
<20190718194303.35971adddfae9...@nemiya.com>
Tue 2019-07-23 17:02:21.416: 19: * Author domain: nemiya.com
Tue 2019-07-23 17:02:21.416: 19: * Organizational domain: nemiya.com
Tue 2019-07-23 17:02:21.416: 19: * Query domain: _dmarc.nemiya.com
Tue 2019-07-23 17:02:21.808: 19: * No DMARC policy record found
Tue 2019-07-23 17:02:21.808: 19: * Action taken: none
Tue 2019-07-23 17:02:21.808: 19: * Result: none
Tue 2019-07-23 17:02:21.808: 19: ---- End DMARC results
Tue 2019-07-23 17:02:21.813: 06: Passing message through AntiVirus (Size:
30445)...
Tue 2019-07-23 17:02:21.813: 06: * Recipient or sender in exclusion list
Tue 2019-07-23 17:02:21.813: 06: ---- End AntiVirus results
Tue 2019-07-23 17:02:21.880: 11: Passing message through Outbreak Protection...
Tue 2019-07-23 17:02:21.880: 11: * Message-ID:
<20190718194303.35971adddfae9...@nemiya.com>
Tue 2019-07-23 17:02:21.880: 11: * Reference-ID:
str=0001.0A15020B.5D366ED6.004F,ss=4,sh,re=0.000,recu=0.000,reip=0.000,cl=4,cld=1,fgs=8
Tue 2019-07-23 17:02:21.880: 11: * Virus result: 0 - Clean
Tue 2019-07-23 17:02:21.880: 11: * Spam result: 4 - Spam (confirmed)
Tue 2019-07-23 17:02:21.881: 11: * IWF result: 0 - Clean
Tue 2019-07-23 17:02:21.881: 11: ---- End Outbreak Protection results
Tue 2019-07-23 17:02:21.883: 07: Passing message through Spam Filter (Size:
30445)...
Tue 2019-07-23 17:02:38.380: 07: * 2.5 FROM_WSP_TRAIL Trailing whitespace
before '>' in From header
Tue 2019-07-23 17:02:38.380: 07: * field
Tue 2019-07-23 17:02:38.380: 07: * 4.9 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish
Tue 2019-07-23 17:02:38.380: 07: * 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and
EnvelopeFrom 2nd level
Tue 2019-07-23 17:02:38.380: 07: * mail domains are different
Tue 2019-07-23 17:02:38.380: 07: * 2.1 DATE_IN_PAST_96_XX Date: is 96 hours or
more before Received:
Tue 2019-07-23 17:02:38.380: 07: * date
Tue 2019-07-23 17:02:38.380: 07: * 0.1 MIME_HTML_ONLY BODY: Message only has
text/html MIME parts
Tue 2019-07-23 17:02:38.380: 07: * 0.0 HTML_MESSAGE BODY: HTML included in
message
Tue 2019-07-23 17:02:38.380: 07: * 1.3 URIBL_CR_SURBL Contains an URL listed
in the CR SURBL blocklist
Tue 2019-07-23 17:02:38.380: 07: * [URIs: efaadah.com]
Tue 2019-07-23 17:02:38.380: 07: ---- End SpamAssassin results
Tue 2019-07-23 17:02:38.380: 07: Spam Filter score/req: 11.10/12.0
Tue 2019-07-23 17:02:38.596: 01: Message creation successful:
d:\mdaemon\queues\inbound\md50000237165.msg
Tue 2019-07-23 17:02:38.596: 03: --> 250 2.6.0 Ok, message saved <Message-ID:
<20190718194303.35971adddfae9...@nemiya.com>>
Tue 2019-07-23 17:02:38.606: 02: <-- QUIT
Tue 2019-07-23 17:02:38.606: 03: --> 221 2.0.0 See ya in cyberspace
Tue 2019-07-23 17:02:38.606: 01: SMTP session successful (Bytes in/out:
30554/418)
